General

  • Target

    acbabb56a8fb2234cf485c1bc050d2b7a4f290f9a5812d7a326ee6f6c04dcd34

  • Size

    305KB

  • MD5

    f08be3f3e9eec7a723fe9fabac2c26f7

  • SHA1

    2527def67245ed1b0cd23e0fa8ad84d3e2d7eb78

  • SHA256

    acbabb56a8fb2234cf485c1bc050d2b7a4f290f9a5812d7a326ee6f6c04dcd34

  • SHA512

    69f3825dd8798f3b69424ef1db1321e10d0978cd681b5d8546b000ab3df0bc5b4a22f38e014a30e35cef36b0fc451979f0a2dc825584458d9859d0007b77e72e

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • acbabb56a8fb2234cf485c1bc050d2b7a4f290f9a5812d7a326ee6f6c04dcd34
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections